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[57] ABSTRACT 

As^stem for _verifying that a card possessor is the authoriz ed 
c ard owner compares scanned fingerprint data "with fing er- 
pnnt data e ncoded on an opt ical card. More than one of The 
person's nngerprints are encoded on the card, and the 
process of identification of the card possessor involves the 
random selection of separate nngerprints for scanning and 
comparison against the encoded fingerprints. A card reade r/ 
writer reads fingerprint characteristic in formation from a n 
o ptical card inserted therein ana a processing u nit, connected 
t o a fingerprint scanner and card reader/writer extracts from 
t he scanned fingerprint certain well known indicators, and 
matches the recorded fingerprint chara cteristic data with t rie 
s canned fingerprint characteristics to establish identity th er- 
e between. 

37 Claims, 5 Drawing Sheets 
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BIOMETRIC IDENTIFICATION PROCESS istics of a person's fingerprint on the card. And the envi- 

AND SYSTEM UTILIZING MULTIPLE ' ronmental measurement conditions and positions must be 

PARAMETERS SCANS FOR REDUCTION OF matched as well. False rejections are very common on the 

FALSE NEGATIVES single fingerprint identification systems. A rotated or rolled 

5 fingerprint, fingerprints taken or scanned with different 

CROSS REFERENCE TO RELATED pressures of the finger on the scanner while it is being 

APPLICATION scanned initially, dirt, a blemish or other injury on the finger 

Hiis application is a continuation-in-part of application being scanne^ all are potential problems leading to false 

Ser. No. 08/523,328, filed Sep. 5, 1995 now abandoned. rejections. While conserving memory requirements, the 

io accuracy of such methods, using only a single fingerprint, 

BACKGROUND OF THE INVENTION can be very low. The comparison of a single scanned finger 

with the corresponding recorded fingerprint information 

FIELD OF THE INVENTION thereto, may incorrectly provide false rejections due to any 

T he present invention is ge nerally related to a method and of these conditions For example, these systems do not 

a Sffi/for verifv InTtnT my o f a uasun, llOla oTv ^v 15 account for temporal perturbations, e.g., a scraped, burned or 

^comparing Sn physic-afclr^ cut finger, that may exist on the owner s finger, thereby 

on e- embodiment, the fingerprint o f the person, wi th' a S lvin S risc to a false readin S of me sm S lc fingerprint image. 

Tecord ed copy ol lniormation corresponding to the chara c- The need to verify with accuracy the identity of a card 

tenstics ol that person provided on an optical card. In the owner is necessary in a wide variety of circumstances, 

" present mvenhdn, tfi r pro " cess flf vfcrif y m^e" id entii 7on5 e 20 including at a passport and immigration check, at banking 

Indi vidual card owner involves the succes sive and sequential and other financial systems, high security areas and the like. 

comparisons of one or more single characterisTEsTT j., What is needed is a method making it more difficult for 

fingerprints, preferably randomly selected if more thanon e criminals to fraudulently use a stolen card and the like. As 

^required to verify the identity. This method of proceedin g more and more accuracy is required the probability of false 

facilitates an i dentification of the individual while maintain - 25 rejections increases. The need for a simple, more accurate 

J f l g P higher de'gref afmiracy flue to the possible use o f method which facilitates the verification process is thus of 

higher degrees of correlation that those that are normally increasing importance, 
available when matching a single physical characteristic. 



SUMMARY OF THE INVENTION 

BACKGROUND OF THE INVENTION 30 Accordmgly> the present mvention provides a method ^ 

Currently, bank cards are used throughout the world system for verifying identification of a person with increased 

which comprise one of more magnetic strips or other record- accuracy, while concomitantly, reducing the probability of 

ing medium on or in the card, carrying coded information false rejection for the authorized card owner, 

thereon. Although simple to use, there is no inherent means 35 The method includes the steps of comparing a scanne d 

in the card for verifying that the person presenting the card physical characteristic, such as a fingerprint, with record ed 

is actually the true owner of the card. While in many information correspondin g to the scanned phys ical 

circumstances a user, will input a Personal Identification " characteristic, e.g.. a fing erprint, as known in the art:~but 

Number (PIN) into a bank card machine, the level of g oes beyond the state of The arl by using a novel p fgcessbf 

security afforded is still not high, given that many users will ^ r andomly and sequentially sekc trng morejha n on e physic al 

write down a PIN number in a check book or the like, c haracteristic for scanning an'acomp an ion' against recorded 

making the number easily accessible to a criminal. characteristic data, thus__ enhancing the_ accuracy"~of "Th e 

There are other circumstances in which a verification of i ndividu al i dentification p rocess andjceducingjhe probabil - 

the identity of persons is necessary. Debit and Point-of^Sale jjy "f improper fals e rejections, 

cards are gaining the same popularity as credit cards. Wei- 45 i n this manner the invention can be used for persons 

fare systems are investigating automatic distribution of temporarily disabled due to broken bones or to sprained 

benefits through a carded system. When businessmen travel muscles, paraplegic persons, persons who cannot provide a 

between countries it is necessary to verify the identify of certain finger for scanning due to a recent accident, for 

each person passing through customs and identify each as example, or victims of intentional maiming or accidents who 

citizen, resident alien, permanent resident and the like. The 50 no longer possess a hand or have lost fingers. Furthermore, 

identification must be accurate, but not too rigorous to be the invention accounts for a poor scan, resulting in an 

inconvenient. There are a number of possibilities for bio- improper false rejection, for example, on a single 

metric identification including physical features, hand fingerprint, or rejections due to injuries or to dirt or blem- 

geometry, retinal scans, facial images, fingerprints and the ishes on the selected finger or the scanning equipment. The 

like. 5S invention advantageously reduces the number of false rejec- 

It has bee n proposed b y many th at the minute details of a tions while at the same time enabling the use of a high 

person's hngerrMnt could be encoded (i.6., In binary cbded comparison correlation to ensure a low number of false 

. form) into memory on a cara. hot example, a coded Ver sion acceptances. 

"oTa nngerpnnt can be stored upon a card. When verificatio n The system utilized by the method of the invention 

^ is required, it is necessary for the user to ai spiay nis 50 i ncludes a storage medium , pr eteraniy portable, and mo re 

fingerprint to a scanner, and at tne same time insert a ca rd p referably an optical "card, storing more than on e 

into a reader which extracts the coded lniormation iden ti- c haracteristic, e.g., fingerprin t, o f the authorized car downer, 

f ving the fi r^gerpnnt r anrt with a prncessn^ compare Ihe a device lor reading tne st ored characteristics, ^ reTeraoly " a 

authorized owner's fingerprint with the stored chara cteris- card reader/writer into which "the c ard is inserTedTor place d 

tics of the owner's fingerprint. 6 $ t hereon, and which accesses the lecSftiM ch aracteristic daT a 

However, the accuracy of such systems is limited, since nf ftp, ra yd pwner t ,_a scanner (re ading means) for reading a 

normally these systems only record some of the character- selected physical characteristic, e.g., fingerpnnTbTthe card 
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o wner, and a Processing Unit (PIS) for extracting essenti al FIG. 3 provides an example of the information, including 

"cha racterl fitir^ n * thp T^n neH hndypart ^ cxiTnpanngTnese a physical representation of the user's fingerprint, that might 
"c naxacteristics with the recorded p hysical characteriiticg: be printed on the front of the user's card, the reverse of 
""Potential applications of the invention include, for which carries the coded fingerprint data as shown in FIG. 1. 
example, controlling entry at passport and immigration 5 FIG. 4 demonstrates the instructions to place the ran- 
checkpoints, ensuring personal identification in financial domly selected finger and the Live Image Preview which 
transactions (e.g., credit card systems), and enhancing secu- might be obtained by the user following the instruction, 
rity at high security installations, and the Like. FIG 5 gnows the result j ng information which can be 

Therefore, it is an object of the present invention to downloaded to the scanning station when the user's identity 
provide a method that increases the accuracy of the security 10 faas beeQ vermed lhat can be displayed on the host CPU at 
identification through the use of higher degrees of correla- a passport or immigration entry point, 
tion. 

It is another object of the invention to facilitate verifica- DETAILED DESCRIPTION OF THE 

tion of identity by decreasing the probability of false rejec- " PREFERRED EMBODIMENT 

tions in the identification process of an authorized card l5 JIG. 1 shows an embodiment of a fingerprint identific a- 
owner, while not permitting unlawful use in attempting to tion system 20 for carrying out the m e thod of the presen t 
circumvent personal data protection. invention. Using the system 20 of FI^TTTthe fingerprints of 

Another obj ect of the invention is to provide an individu al the card owner 23 ar e stored-on the encoded porti on of an 
recognition system comprising: a storage medium storing as opticaLcard 25, as part of individual identmca tionjnlorma- 
Rometric data a pluralit y of physical characteristics^oT a 2 q tion. As shown in FIG. 3 ^ th e identity card~ 25 ^can~also 
user; reading means for extracting from the user biomet ric contain oth e r variou s biometric an d represe ntat ive informa - 
dalaTepresenting one of the physical characteristics stor ed \ion about the individua fc ard owner 23, recordedphysical ly 
by^the storage means; comparison means lor determinin g on the face of the card, as at reference numeral 28 of HG . 
whether or not the extracted biometric data rep resentslhe 5, or enc oded thereon, as a.t refere nce numeral 29 of FIG. 5, 
sa me physical characteristic as corresponding stoTetTbi o- 25 or recordedon electronic or optical^~e"cUa^O''^FIGri , 
metric data nhtaineH frnm the sto rage medium ; and contro l i ncluding, for example, name, account number, date of birt h, 
m eans for instructing the reading means to extract from th e se x^ height, weight, information on cilizenship T health 
use radditional biometri c H? fa rep rinting 3 fiirr^r p " t ■pTvysi- i nspection or health information and the like might be 
naTrh^ prtp.ngrin.Qtnrf i d by th^sto i agfi mr.nnf ydepending on Tnaint arned. The optical card also compnses memory 30 
the d etermination by said comp arison means. 30 shown inTlG. 1 for storing the fingerprint data. Preferably, 

*Ye7another object of the invention is to*provide a personal only certain characteristics of a plurality of fingerprints are 
identification method using a data storage medium contain- stored on the card 25, thereby conserving memory space, 
ing previously stored biometric data representing a plurality The memory capacity can be reduced down to only about 1 
of physical characteristics of a user, the method comprising: Kbyte per fingerprint when only certain key characteristic 
extracting from the user biometric data representing one of 35 features are encoded. Such fingerprint characteristics are 
the physical characteristics stored by the storage medium; preferably limited to a few significant features such as the 
determining whether or not the extracted biometric data depth and interval of the fingerprint, ridge pattern 
represents the same physical characteristics as correspond- information, or key features relating to the number and kind 
ing stored biometric data obtained from the storage medium; of vortices, arcs, crossings and other line forms shown by the 
and extracting from the user additional biometric data rep- 40 fingerprints. However, it should be noted that optical cards 
resenting a different physical characteristic stored in the with a large memory capacity are available, but it may be 
storage medium depending on the determination at the advisable for other reasons to limit the amount of data 
determining step. recorded therein (for example, correlation thereof would 

Still another object of the invention is to provide an require the processing unit used with the present system to 
individual recognition system for use with a storage medium 45 have excessive computational capacity). Extraction and 
on which biometric data corresponding to a plurality of matching software libraries (not shown) can be used of the 
physical characteristics of the user has been stored, the type developed by The Phoemx Group, Inc. of Pittsburg, 
system comprising: reading means for extracting from the Kans. However, the present invention works well with any 
user biometric data representing one of the physical char- fingerprint matching system. 

acteristics stored by the storage means; comparison means 50 In the present invention, data representing the character- 
for determining whether or not the extracted biometric data istic features of a plurality of fingerprints, which may be all 
represents the same physical characteristic as corresponding of the fingerprints or only a limited number of fingerprints 
stored biometric data obtained from the storage medium; from each hand of an authorized person, are preferably 
and control means for instructing the reading means to coded and stored on the card 25, in the form of a binary or 
extract from the user additional biometric data representing 55 multi-value coded signal. This is preferably done by scan- 
a different physical characteristic stored by the storage ning designated fingers of the person when issuing a card 25 
medium, depending on the determination by the comparison on similar equipment 20 to that which will be used during 
means verification. Any number of fingerprints may be chosen for 

Other objects and features of the present invention will be scanning from one to all five fingers on each hand, 
apparent from the following detailed description in conjunc- 60 Therefore, the card 25 storage mechanism 30 carries mfor- 
tion with the accompanying drawings. nation relating to more than one finger of the person 23, as 

explained more fully below, so that the system can request 
BRIEF DESCRIPTION OF THE DRAWINGS alternative fingerprint information if one of more of the 

FIG. 1 shows the system components for a preferred fingers are either not available of scanning, due to cuts, 
embodiment for carrying out the method of the invention. 65 blemishes or other injury, or a defective fingerprint was 

FIG. 2 represents the main stages of the method according originally taken or if a first or later scans fail to confirm the 
to the invention in the form of a flowchart. identify of the card holder. 
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> Although the disclosed preferred embodiment has been 
described as utilizing fingerprint data, any biometric data 
representing a plurality of physical characteristics can be 
utilized. For example, retinal scans of both of a cardholder's 
eyes can be encoded onto the card. Similarly, palm prints of 
each of the cardholder's* hands can also be used. In fact, the 
present invention is not limited to such obvious groupings of 
physical characteristics. Fgr example, the left hand prin t, 
r ight eye retinal scan, and right hand tinpernrmt s can alilpc 
stored on th e o ptical c a rd and randomly^elected ones of the 
booyparts corresponding to such characteristics re quiredT o 
6e presented lor v erificati on. Bi6 met ric data representin g 
ot ner physical characteristics, such as the cardholder's si g- 
n ature (its appearance or characteristics ot how the ca rd- 
hol der tonus his signature!, facial characteristics, o r key- 
SjboaTa d ynarmcs jffiifh Icgying pressure, rate, sequence, or 
he like) can also be compared. 

he remaining components of FIG. 1, namely those 
designate by reference numerals 35, 37, 42, 45 will be 
described in relation to the flowchart, as depicted in FIG. 2, 
showing the main steps when using the invention. The 
process of identification of the individual card owner 23 
with the current invention is based upon the random mea- 
surement of successive and sequential single fingerprints, as 
opposed to the measurement of all fingerprints or merely the 
measurement of only a single fingerprint. 

The, p rocess 45 strikes an acceptable balance between 
confirmation ot tbe identity oi the card holder^ (a lo w 
number of false acceptances) with a facilitation or ease of 
0 f th^ cyg^rp (a low number of false rejections). T he 
balance is achieved with two basic components. F acilitation 
i s achieved by the use of multiple (random) fingerprint 
comparisons. Therefore, it a problem, environmental' or 



, impedes a first match, other l ingers can be called 
tor and scanned until a match is achieve d, thus a high 
^correlation of fingerprmF attributes can be requirecTfor a 



T he nngerprint pattern is converted to an electric signa l 
6 9 and sent to a peripheral fU 37 or to a PU 37 in the scan ner 
35~itself. In the preferred embodiment, the extractiojT and 



15 



20 



25 



30 



35 



match, .increasing the accuracy oflrie^vetffl^ ioTa^f^the 
irll^ntity flf* thr uftei, TTre ra ndom nature oT ~reques!s'^for 
sp ecific fingers on either or both han ds further impedes 
c riminal acti vity Finally, preferably, barter a predetermined ^ 
number of attempts, a decision can be made to terminate tbe 
process with a rejection. The fact that a rejection occurs only 
after a predetermined number of unsuccessful comparisons 
advantageously results in a minimum of false rejections, 
while also allowing each individual comparison to utilize a 45 
high comparison correlation so that security is maximized. 

Referring to' the flow chart in FIG. 2, to initiate 62 the 
process 45, the owner 23 inserts a card 25 into a card 
reader/writer 45. Preferably, either by a display 42 or some 
other means, the card owner is also requested 64 to place one 
of his or her fingers on the fingerprint scanner 35. In this 
instance, the particular hand and associated finger requested 
for scanning is random, as the result of any conventional 
random algorithm. The fingerprint scanner 35 can be any of 
a wide range of suitable scanners, such as those manufac- 
tured by Digital Biometrics, Inc. The scanner 35 comprises 
a fingerpress having a transparent section through which tbe 
fingerprint image can be obtained. 

1 The scanner 35 reads an image 65, as shown in FIG. 4, of 
the selected fingerprint of the user 66. Similar to the process 
of encoding the fingerprint characteristic data onto the card 
25, described above, the scanning can be carried out using 
a number of techniques, e.g., optically using high intensity 
illumination and an array of photosensitive diodes as a 
camera to record an image, or some other optical scanning 
device such as a laser scanner, to provide an image which 
can be processed electronically. 



50 



55 



si gnal Which is ujdid into a Uinaiy Ut llMll-v ' aiue coded 
signal. Thereafter, certain characteristic patterns are 
extracted 75 preferably using the same extraction program 
as that used to encode the fingerprints. The extracted char- 
acteristics preferably correspond to those encoded onto the 
optical card. As mentioned above, with reference to the card 
encoding process, such fingerprint characteristics are pref- 
erably significant features such as the depth and interval of 
the fingerprint, ridge pattern information, or key features 
relating to the number and kind of vortices, arcs, crossings 
and other line forms shown by the fingerprints. Tne char- 
acteristic extracted are used by the matching program for 
comparison with the fingerprint characteristic data enc oded 
in the optical card. 



65 



"As shown in FIG. 2, the recorded data of the particular 
scanned fingerprint is accessed 78 from the optical card 
using an optical card reader 45 such as the RW-20 Reader/ 
Writer manufactured by Canon Inc. of Japan. The card 
reader/writer 45 receives the recorded fingerprint character- 
istic information on the card owner corresponding to the 
scanned fingerprint. The card reader/writer 45 outputs the 
recorded fingerprint information to the PU 37. The PU 37 
can display the scanned fingerprint 65, along with the 
directive 51 indicating which finger is to be/has been 
scanned, as shown in FIG. 4. 

The next step is the comparison of the recorded finger- 
print data with the specific extracted characteristics from the 
scanned fingerprint using the matching program 82. The 
extraction and matching algorithms are preferably imple- 
mented into software stored by the PU 37. The comparison 
of the recorded data with the scanned fingerprint information 
can be made according to any of the conventional matching 
algorithms depending primarily on the characteristic fea- 
tures extracted from the fingerprint image. 

If a predetermined correlation exists between the recorded 
fingerprint characteristic data and the scanned fingerprint 
extracted characteristics at 92, a display associated with the 
PU 37 can "either indicate the identification confirmation as 
by 101 of FIG. 4, or alternatively, a decision signal can be 
sent at 125 from the PU 37 to an operational device (not 
shown) such as a door or gate for security situations, coded 
lights can flash or the result can be displayed on one or more 
screens. The decisional pass/fail signal at 125 may also be 
transmitted back to the card reader/writer 45 to retain the 
card at 78 in a failure to identify situation or optically or 
otherwise mark the card at 78 to indicate border crossings, 
access to secured areas or other encoded records on the card 
at 78. A remotely located display (not shown) may also 
indicate that a match has been found, and thereby confirm 
identification. Instead of indicating confirmation on a 
display, of course, the verification decision can also be 
indicated through illumination of a specified color of light or 
other expedient, such as the opening of a door or gate. 

However, if no match has been found, at 110, instead of 
immediately denying entrance or access to or identification 
of the individual, as the case may be, the present invention 
allows for the successive and sequential placement of further 
fingers onto the fingerprint scanner 115. Therefore, by 
allowing for comparison of two or more fingerprints, the 
possibility of a defective signal based on an obscured or 
unavailable fingerprint, environmental factors, such as 
excess moisture on the fingers, or any artifact preventing a 
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match from being made, can be compensated for by the 
method of the present invention. As mentioned above, the 
optical card carries information preferably related to at least 
two ringers on each hand. 

In the preferred embodiment, if there was not a positive 5 
match on the first fingerprint, another finger, preferably 
associated with the other hand and chosen at random, is 
requested to be placed onto the fingerprint scanner. This 
finger is scanned by the fingerprint scanner and the same 
process, disclosed above, and as shown in FIG. 2, is com- 10 
menced until a decision is made either indicating a match or 
the lack thereof. 

If in the second scan there is no match, a third finger is 
randomly selected for scanning and measurement. If again 
there is no match with the third randomly selected finger at 15 
120, recognition of the individual carrying the optical card 
could be denied at 125 or additional attempts to verify 
identification could be pursued. 

This method of allowing multiple attempts facilitates use 2Q 
of the card 25 and verification of the identity of the 
individual, while the use of higher degrees of correlation 
assures that the security of accurate identification is not 
sacrificed. Therefore, the system 20 for use in the method of 
the invention preferably comprises a fingerprint scanner 35 ^ 
to scan one or more fingers in successive and sequential 
order; card reader/writer 45 for receiving recorded finger- 
print characteristic information from an optical card 25 
inserted therein on the user corresponding to the particular 
scanned finger(s); and a PU 37, connected to the fingerprint 3Q 
scanner 35 and card reader/writer 45, for creating a coded 
signal representing the characteristics of the scanned 
fingerprint, extracting from the scanned fingerprint certain 
well known indicators, and matching the recorded finger- 
print characteristic data with the scanned fingerprint 35 
extracted characteristics to establish identity therebetween. 

In addition to the fingerp rint characteristics, the card ca n 
alSTPcoTTiaill olliet Various biometric and representativ e 
i nformation I X, 29, as shown , tor example, in Fl li. 5, about 
t he individual card owner, inscribed o n the card or ele c- ^ 
tro pically or optically s tored, mcluding, for example, the 
name, bank account number, date ot birth, sex, height, 
we ight, etc., and specifically, for a passp ortHhe recorded 
r rjedia can contain information on^itize nsBip, health" inspec- 
t ion and a_.completc catalog of travel history 130, al'f o f 45 
v ^ich can be displayed at 129" 13ITon the PU 37 at a ny 
g iven location, as shown in the sample display 42 of FIG. 3 . 

The present invention is useful in many applications. For 
example, a government may issue cards to be used by 
authorized recipients of various government services, such so 
as health insurance, welfare benefits, social security benefits, 
driver's licenses, or the like. The present invention can be 
used to prevent imposters from receiving such services. In 
this context, it should be noted that biometric data repre- 
senting physical characteristics of a plurality of persons, for 55 
example, a family, can be stored on a single optical card 
whereby, for example, any member of a family qualifying 
for government services can present the card and be iden- 
tified as a qualified recipient of such services. 

In another embodiment of the present invention, the 60 
storage medium, rather than be portable, can exist at a fixed 
location along with storage media storing biometric data for 
a number of other persons. For example, at secured facilities 
in which a limited number of people (e.g., employees) 
routinely request access, the storage medium can be built 65 
into a main computer system as a series of secured memory 
locations. In such a system, an employee, for example, 
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seeking access to the secured facility can have his identity 
verified without producing a card since the system can make 
the required comparison by requesting presentation of 
appropriate employee body parts for scanning and compar- 
ing biometric data extracted from the employee with bio- 
metric data representing physical characteristics of relating 
to the employee stored in the secured memory location. The 
same successive and sequential comparison method as has 
been described above can then be used to permit or deny 
access. 

While the preferred embodiment of the present invention 
has been described, it should be appreciated that various 
modifications may be made by those skilled in the art 
without departing from the spirit and scope of the present 
invention. Accordingly, reference should be made to the 
claims that determine the scope of the invention. 

I claim: 

1. An individual recognition system comprising: 

a storage medium storing as biometric data a plurality of 
physical characteristics of a user; 

reading means for extracting from the user biometric data 
representing one of the physical characteristics stored 
by said storage medium; 

comparison means for determining whether or not the 
extracted biometric data represents the same physical 
characteristic as corresponding stored biometric data 
obtained from said storage medium; and 

control means for instructing said reading means to 
extract from the user additional biometric data repre- 
senting a different physical characteristic stored by said 
storage medium, depending on the determination by 
said comparison means. 

2. A system according to claim 1, wherein the reading 
means includes a display for requesting that the user present 
one of the user's body parts for extraction of the biometric 
data corresponding thereto. 

3. A system according to claim 2, wherein the body part 
is one of the user's fingers. 

4. A system according to claim 1, wherein the storage 
medium comprises a portable storage medium. 

5. A system according to claim 4, wherein the portable 
storage medium comprises an optical card. 

6. A system according to claim 5, wherein said compari- 
son means includes an optical card scanner. 

7. A system according to claim 1, wherein said compari- 
son means outputs a positive comparison result if a match is 
found between the extracted biometric data and the corre- 
sponding stored biometric data. 

8. A system according to a claim 7, wherein the control 
means instructs said reading means to extract from the user 
additional biometric data if a positive result is not output by 
the comparison means. 

9. A system according to claim 1, wherein said biometric 
data represents fingerprint data of a plurality of the user's 
fingers. 

10. A system according to claim 9, wherein said reading 
means comprises a fingerprint scanner. 

11. A system according to claim 9, wherein in the com- 
parison performed in said comparing means, the extracted 
biometric data corresponds to a randomly selected first 
fingerprint of a user's hand, and if no match occurs upon a 
scan of the first fingerprint, a second fingerprint from a 
randomly selected other finger is selected by said control 
means. 

12. A system according to claim 1, wherein said reading 
means comprises a retinal scanner. 
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13 An individual recognition system comprising: 24. A method according to claim 23, wherein the body 

a portable storage medium storing as biometric data a part is one of the user's fingers, 

plurality of physical characteristics of a user; » A method according to claim 23 whe ein the storage 

v J * J medium comprises a portable storage medium, 

reading means for extracting from the user biometric data ^ 2fi A method according to claim 25, wherein the portable 

representing one of the physical characteristics stored storage medium comprises an optical card. 

by said storage medium; 27. A method according to claim 26, wherein said deter- 

comparison means for determining whether or not the mining step is performed using an optical card scanner. 

extracted biometric data represents the same physical 28. A method according to claim 23, wherein the biomet- 

characteristic as corresponding stored biometric data 1Q ric data represents fingerprint data of a plurality of the user's 

obtained from said storage medium and outputting a fingers. 

positive comparison result if a match occurs; and 29. A method according to claim 28, wherein said first 

, r • . • j j- « t~ extract step uses a fingerprint scanner, 

control means for instructing said reading means to 30. A method according to claim 28, wherein in said first 

extract from the user additional biometric data repre- extracting step> the extracted biometric data corresponds to 

senting a different physical characteristic stored by said 15 a randomly se i ec ted first fingerprint of a user's hand, and, if 

storage medium if said comparison means does not a match does nol Qccur m said determining step, a second 

output a positive test result. fingerprint from a randomly selected other finger is selected 

14. A system according to claim 13, wherein the reading f or extraction at said second extracting step. 

means includes a display for requesting that the user present 31 ^ method according to claim 23, wherein said deter- 

one of the user's body parts for extraction of the biometric 2 o mining step outputs a positive comparison result if a match 

data corresponding thereto. is found between the extracted biometric data and the 

15. A system according to claim 14, wherein the body part corresponding stored biometric data. 

is one of the user's fingers. 32. A method according to claim 31, wherein the addi- 

16. A system according to claim 13, wherein the portable tional biometric data is extracted from the user if a positive 
storage medium comprises an optical card. 25 result is not output at said determining step. 

17. A system according to claim 16, wherein said com- 33 ^ method according to claim 23, wherein said first 
parison means includes an optical card scanner. extraction step uses a retinal scanner. 

18. A system according to claim 17, wherein said bio- 34. A method for identifying one person from a plurality 
metric data represents fingerprint data of a plurality of the 0 f persons, said method comprising the steps of: 

user's ringers. 30 gathering identification data representing a plurality of 

19. A system according to claim 18, wherein said reading physical characteristics from each of the plurality of 
means comprises a fingerprint scanner. persons; 

20. A system according to claim 18, wherein in the ^ gathered data; ^ 

comparison performed in said comparing means the providing apparatus for repeatedly obtaining different 

extracted biometric data corresponds to a randomly selected 35 identmcat i 0 n data representing respective ones of the 

first fingerprint of a user' s hand, and if no match occurs upon of ^ characteristics from a person pre _ 

a scan of the first fingerprint, a second fingerprint from a ^ himself of herself md ^p^g obtained 

randomly selected other finger is selected by said control identification data with stored data until the obtained 

means. ^ . ^ t . j . identification data matches stored identification data for 

21. Asystem according to claim 13, wherein said reading 40 the respective physical characteristic. 

means comprises a retinal scanner. 35 a method according to claim 34, wherein the identi- 

22. Apersonal identification method using a data storage ^ repeatedly oMained at said p rovidm g step 
medium containing previously stored biometric data repre- ^ biometric data corresponding to fingerprints of 
senting a plurality of physical characteristics of a user, the randomly x]sctBd ^Q^m fin g er s of the person presenting 
method comprising: 45 himse if or herself. 

a first extracting step of extracting from the user biometric 35. A method according to claim 34, wherein the identi- 

data representing one of the physical characteristics fi ca tj 0 n data gathered at said gathering step comprises 

stored by the storage medium; biometric data representing fingerprints of each of the plu- 

a determining step of determining whether or not the rality of persons and is stored on one of a plurality of optical 

extracted biometric data represents the same physical 50 cards, and each of the plurality of optical cards is issued to 

characteristics as corresponding stored biometric data the person whose identifying data it contains, for presenta- 

obtained from the storage medium; and tion by such person to establish his or her identity. 

a second extracting step of extracting from the user 37. A method according to claim 34, wherein said method 
additional biometric data representing a different physi- is adapted to determine which persons from a population of 
cal characteristic stored in the storage medium depend- 55 persons is a qualified person, said method further compris- 
ing on the determination at said determining step. ing a step of analyzing the gathered identification data to 

23. A method according to claim 22, wherein the first verify whether or not each of the plurality of persons from 
extracting step requests that the user present one of the whom data has been gathered is qualified. 

user's body parts for extraction of the biometric data cor- 
responding thereto. ***** 
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